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DETAILED ACTION 

1 . Claims 54-73 have been examined. 

Response to Amendment 

2. The Amendment filed on 4/23/2007 is sufficient to overcome the prior rejection. The 35 
USC 103 rejection now utilizes all the priorly used 35 USC 103 prior art to reject the 
independent claims. 

Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

3. Claims 54-73 are rejected under 35 U.S.C. 103(a) as being unpatentable over Bezos (6,029,141) 
in view of Messer (2004/0230491) in view of Angles (5,933,81 1) in view of Herz (2001/0014868). 

Claims 54, 59, 60, 62, 64, 65, 66, 67, 72: 

Examiner notes that Applicant's claims concerning the data interface, data interface 
provider, and content provider are read in light of Applicant's Specification (Paragraphs [36, 45, 
37,40]). 

Bezos discloses combining predetermined Content, an Interface Provider Identification 
Code, and a Dynamically-Generated User Identification Code to Form a Data Interface, 
Providing the Data Interface to a User System, and Receiving a Request for Selected Content 
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that is Formed by Combining the Interface Provider Identification Code and the User 
Identification Code (Fig. 8; col 15, lines 5-16; col 17, lines 10-29; col 8, lines 16-31; col 13, lines 
41-54; col 14, lines 1-11). 

Note that Bezos discloses that the advertiser can use any of the predetermined content 
available from merchant (Amazon) website. And, note that the advertiser presents 
predetermined content that also includes a link with an advertiser identifier as well as a user 
identifier. 

Bezos further discloses that the url can include data interface provider identification and 
unique customer identification (Fig. 8). Bezos discloses that the unique customer id can be 
generated or added to the URL upon the user selecting a referral link (see above citations). 

Bezos does not explicitly disclose that the original referral link can include the unique 
customer ID before selection. 

However, Bezos discloses that the unique customer id can be generated or added to the 
URL upon the user selecting a referral link. And, Bezos discloses that the unique user id can be 
made a part of the advertising content that is presented to the user as the user shops (Fig. 8 and 
above citations). And, Bezos discloses that the unique customer ID can be part of the URL for 
subsequent activity (see above citations) even if the user remains on the original advertiser 
webpage (col 12, lines 27-41). And, MPEP 2144.04.IV.C discloses that changing the sequence 
is obvious and MPEP 2 144.04. VI discloses that reversal or rearranging of parts is obvious. And, 
Bezos discloses that the unique user id can be used for tracking and targeting a user (Fig. 1, item 
160). 
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Therefore, it would have been obvious to one having ordinary skill in the art at the time 
the invention was made that Bezos placing the user id in the URL along with the presented 
advertising information can occur before or after selecting the advertising link. One would have 
been motivated to do this in order to allow relevant targeting/tracking information on a user to be 
utilized by the associate/advertiser as well as the merchant or because changing the sequence or 
reversal or rearranging of parts is an obvious modification. 

While Bezos discloses tracking requests for information, Bezos does not explicitly 
disclose tracking invalid requests for information. 

However, Messer discloses tracking and auditing user requests for information: 
"[0004] It is an object of the present invention to provide a data processing 
system for tracking, managing, and auditing select transactions between a 
plurality of computer workstations interconnected via a common network. 

[0013] In order to accomplish these and other objects, the present invention 
includes a data processing system designed and configured to operate on one or 
more servers interconnected for communication. The data processing system 
includes a Clearinghouse server programmed to track, manage, and audit 
associated transactions of Users clicking-through an Content Provider web site 
and purchasing a product or service from a Merchant. The Clearinghouse server 
is also programmed to track and report on the level of activity associated with 
the Users and produce, on a periodic basis, accounting statements for the 
participants directed to the transactions that have transpired during the 
defined period". 
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Messer further discloses tracking both valid and invalid information requests in order to 
improve commerce on the web: 

"[0002]. . .More specifically, the present invention relates to a referral 
tracking and control system for promoting goods and services on a wide area, 
public or private access network, such as the Internet . 

[0003] As discussed in more detail in the above-referenced parent cases, the 
present invention includes the ability to track select USER activity while on 
the Web including interactions with Web pages and click-through navigation to 
select Web sites where purchases can be executed. Notwithstanding these 
advancements and advantages, commerce on the web can still be improved upon. 
Recognizing some of the current difficulties in implementing affiliate programs 
has led to the innovations presented herein. 

[Abstract] An improved processing system for tracking commerce on the Internet 
provides for subvariable processing and includes web page scanning to discern fraud or 
improper content to insure proper promotion of select products within the 
network environment" (Abstract). 

Messer further discloses determining invalid requests for information and tracking invalid 
requests for information, and utilizing a database and reporting for invalid requests for 
information: 

"[0006] It is still another object of the present invention to provide a vehicle 
for the detection of affiliate sponsored fraud ; exemplary fraud of concern 
includes use of a process that employs a Javascript to artificially multiply 
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the number of clicks, impressions and/or sales on a banner or similar 
promotional piece. 

[0026]. . .In its preferred embodiments, the server is configured with a UNIX operating 
system. Database management software utilizing Oracle.RTM. on an Apache.RTM. 
Webserver is configured for the specific operating system environment. As 
discussed below, the Clearinghouse is further equipped to deter fraud and other 
non-productive activity. 

[0036] Turning now to FIG. 2, a high level flow chart depicts the programming 
logic for detecting click fraud . Logic begins at start block 200 and the 
system at block 210, pulls and enters the next web page in sequence. With the 
large number of affiliate web pages makes a sequential review perhaps too 
involve. Accordingly, the system may use a number of sampling techniques, that 
provide some policing capability. In this way, counter variable I increments 
the sampled pages and sends these to the scanning program block 220. 

[0037] ... If this test is also positive, the system generates a report, positively 
identifying the page as a potential source of click fraud., block 250. Logic then continues at 
260. 

[0038] In addition to the Javascript detection algorithm, the system further tracks 
potential click fraud by assessing historical patterns of commerce. For example, if a click- 
through includes the same ID, the system measures the interval between successive clicks. A 
relatively fast click speed, or multiple clicks at a uniform interval reflects the possibility that the 
click is machine generated and potentially fraudulent . Other patterns may give further details, 
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such as large jumps in traffic from individual sites. 

[0039] For large scale burst traffic generated from a single or a grouped IP address, 
within a short interval, the apache server of the Clearinghouse is programmed to block such 
traffic from hitting the database of the ad servers, thus defending the Clearinghouse server from 
certain types of DOS (denial of service) attacks. Based on these types of detected activity, the 
system will create a report and trigger further and more comprehensive evaluations". 

Therefore, it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to add Messer's auditing both valid and invalid requests for information 
to Bezos' auditing requests for information. One would have been motivated to do this in order 
to provide prevent fraud, provide better auditing and tracking of information requests, and to 
provide better commerce on the web. 

Messer further discloses utilizing encryption (Paragraph 0032). 
Additionally, the following is in regards to id expiration. 

Bezos discloses a shopping cart associated with a user expiring (col 14, lines 57-61). 
Bezos does not explicitly disclose that the user id expires. 
However, Angles discloses utilizing cookies, that cookies can be utilized for 
identification purposes, that cookies can uniquely identify a computer, that cookies can be set to 
work for only certain URL addresses, that cookies can be set to expire, that identifiers and 
preferences can be stored locally: 

"(25) Persistent Client State Cookies (Cookie ). A file stored on the client 
computer which contains information such as user names and preferences. In the 
preferred embodiment, the Cookie in the consumer computer stores a member code 
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which uniquely identifies each consumer. The specification for Cookies can be 

found at http://www.netscape.com/newsref/std/cookie.sub.-- spec.html (col 6, lines 59-65); 

(55) A " cookie " is a small piece of information which a web server (via a CGI 
script) can store with a web browser and later read back from that browser. 

This is useful for having the browser remember some specific information across 
several pages; for example, when the consumer browses through a "virtual 
shopping mall" and add items to his "shopping cart," a list of the items he has 
picked up is kept in the consumer browser's cookie file so that the consumer 
can pay for all the items at once he has finished shopping. 

(56) To create a cookie, a web server sends a "Set -Cookie " HTTP header line 
in response to a URL access from a browser: 

(57) Set -Cookie : NAME=VALUE; expires=DATE ; path-PATH; 
domain=DOMAIN.sub.-- NAME; secure 

(58) NAME and VALUE are the actual information to include in the cookie . 
DATE is the time at which the cookie information expires and will be 
"forgotten" by the browser. DOMAIN is a host or domain name for which the 
cookie is valid. PATH specifies a subset of the URLs at that server for which 

the cookie is valid. If "secure" is included in the cookie, then the cookie 
will only be transmitted over a secure network connection. All of these fields 
except NAME= VALUE are optional. 

(59) Whenever the browsing software sends a HTTP request for a URL on a 
server for which it has stored cookies, it includes a line in the form : Cookie: 



Application/Control Number: 09/821,259 Page 9 

Art Unit: 3622 

NAME =VALUE; NAME=VALUE; . . . which lists all cookies that apply to that 
particular URL. The following is a sample CGI program (a Unix shell script) 
that sends a cookie to a particular URL. 

(62) echo "Se t-cookie : codeno=12345A; expires =Thursday, Jan. 1, 
1998-12:00:00 GMT"" (col 11, lines 5-40). 

Therefore, it would have been obvious to one having ordinary skill in the art at the time 
the invention was made that Bezos user id can expire. One would have been motivated to do this 
in order to prevent the use of outdated user identifiers. 

Additionally, the following is in regards to encryption. 

Bezos does not explicitly disclose utilizing different encryption standards for secure 
communications. 

However, Messer further disclose utilizing encryption (Para 0032). 

And, Herz further discloses utilizing different encryption standards for secure 
communications (Paragraph 287). 

Therefore, it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to add Messer and Herz utilization of encryption to the prior art's secure 
communications. One would have been motivated to do this in order to provide standard and 
readily available technical capabilities for secure communications. 

Additionally, Bezos does not explicitly disclose identifying an incoming data request as 
being associated with a SPAM electronic mail message. 
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However, Examiner notes that Messer discloses preventing Internet fraud and click fraud 
related to advertising (Abstract; [6, 14, 36, 37, 38]). 

And, Examiner notes that Applicant's Specification states that data requests being 
associated with a SPAM electronic mail message and click fraud were old and well known in the 
art (Applicant's Specification [9, 10, 1 1, 12]). Hence, the Applicant's Specification states that it 
was old and well known that click fraud can occur from a URL on a webpage or from a URL in 
an email or from a URL in a SPAM type email. 

Therefore, it would have been obvious to one having ordinary skill in the art at the time 
the invention was made that the combination of the prior art and Messer' s identifying click fraud 
can be applied to websites, emails, SPAM emails. One would have been motivated to do this in 
order to better identify click fraud. 

Claim 55: Bezos further discloses receiving the request for data at the merchant system 
(Fig-1). 

Claim 56: Herz further discloses utilizing standard encryption protocols ([287]). 
Claim 57: Bezos further discloses utilizing cookies and IP addresses (col 4, lines 50-55; 
col 5, lines 55-60). 

Claim 58: Bezos further discloses generating interest (Figure 1; col 1, lines 50-60). 
Claim 61,71: Bezos further discloses providing advertising (col 1, lines 36-44). 
Claim 63, 73: Bezos further discloses providing remuneration (Abstract). 
Claim 68: Bezos further discloses providing supporting communication systems (Figures 
1,2,4,5). 

Claim 69: Bezos further discloses utilizing networks (Figures 1, 2, 4, 5) 
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Claim 70: Angles (col 9, lines 25-35) and Herz ([21, 265]) discloses utilizing wireless 
communications. Also, the MPEP discloses that making something portable or separable is an 
obvious variation (MPEP 21 44.04. V). 

Response to Arguments 

4. Applicant's arguments with respect to claims have been considered but are moot in view 

of the grounds of rejection above. Examiner also notes the following. 

On page 8 of the Applicant's Remarks dated 4/26/2007, Applicant states: 

"A. The Cited Prior Art References Do Not Disclose or Suggest Authenticating a Data 
Request Received upon Activation of a Hyperlink Transmitted to a User Computer System in an 
Electronic Mail Message and, if the Request Comprises an Invalid Data Request, Identifying, the 
Data Request as Being Associated with a SPAM Electronic Mail Message and Providing the 
Provider Identification Code to an Invalid Response Database System as Recited in Claims 54- 
ZL 

On page 1 0, Applicant states: 

"The Examiner however, does not assert that Bezos or Messer, either individually or in 
combination, teach identifying an incoming data reguest as being associated with a SPAM 
electronic mail message as set forth in claims 54 and 65. In fact, Applicant notes that the term 
"SPAM" does not even appear in either Bezos or Messer. Bezos and Messer therefore do not 
disclose or suggest identifying an incoming data reguest as being associated with a SPAM 
electronic mail message. According, at least one recited element of claims 54 and 65 is totally 
missing from the cited prior art references. Applicant submits that claims 54 and 65 are not 
anticipated or rendered obvious by Bezos in view of Messer and that claims 54-73 are in 
condition for allowance." 
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On page 10, Applicant states: 

"B. The Cited Prior Art References Likewise Do Not Disclose or Suggest Identifying 
a Data Request as Being Associated with a SPAM Electronic Mail Message and Providing the 
Provider Identification Code to an Invalid Response Database System in Combination with Use 
of Computer identification Data that Expires as Recited in Claims 54-73. " 

On page 1 1, Applicant states : 

"For at least the reasons set forth above, claims 54-73 are not anticipated or rendered 
obvious by Bezos in view of Messer in further view of Angles. As discussed above with 
reference to Bezos and Messer, Applicant notes that the term "SPAM" likewise does not appear 
in Angles. Neither Bezos, Messer, nor Angles disclose or suggest identifying an incoming data 
request as being associated with a SPAM electronic mail message. According, at least one 
recited element of claims 54 and 65 is totally missing from the cited prior art references." 

On page 11, Applicant states: 

"C. The Cited Prior Art References Likewise Do Not Disclose or Suggest Receiving a 
Data Request that Includes an Encrypted Confirmation Code, Identifying the Data Request as 
Being Associated with a SPAM Electronic Mail Message, .and Providing the Provider 
Identification Code to an Invalid Response Database System, Wherein the Confirmation Code is 
Encrypted in Accordance with a Selected Encryption Standard, as Recited in Claim 56. " 

Examiner notes that the main feature that the Applicant states as not being disclosed by 
the combination of the prior art is the identifying an incoming data request as being associated 
with a SPAM electronic mail message. 

However, Examiner notes that while specific references were made to the prior art, it is 
actually also the prior art in its entirety and the combination of the prior art in its entirety that is 
being referred to. Also, one cannot show nonobviousness by attacking references individually 
where the rejections are based on combinations of references: See In re Keller, 642 F.2d 413, 
208 USPQ 871 (CCPA 1981); In re Merck & Co., 800 F.2d 1091, 231 USPQ 375 (Fed. Cir. 
1986). 
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And, Examiner notes that it must be presumed that the artisan knows something about the 
art apart from what the references disclose. In re Jacobv, 309 F.2d 513, 135 USPQ 317 (CCPA 
1962). The problem cannot be approached on the basis that artisans would only know what they 
read in references; such artisans must be presumed to know something about the art apart from 
what the references disclose. In re Jacoby. Also, the conclusion of obviousness may be made 
from common knowledge and common sense of a person of ordinary skill in the art without any 
specific hint of suggestion a particular reference. In re Bozek, 416 F.2d 1385, USPQ 545 (CCPA 
1 969). And, every reference relies to some extent on knowledge or persons skilled in the art to 
complement that which is disclosed therein. In re Bode, 550 F.2d 656, USPQ 12 (CCPA 1977). 

And, Examiner notes that Messer discloses preventing Internet fraud and click fraud 
related to advertising (Abstract; [6, 14, 36, 37, 38]). 

And, Examiner notes that Applicant's Specification states that data requests being 
associated with a SPAM electronic mail message and click fraud were old and well known in the 
art (Applicant's Specification [9, 10, 1 1, 12]). Hence, the Applicant's Specification states that it 
was old and well known that click fraud can occur from a URL on a webpage or from a URL in 
an email or from a URL in a SPAM type email. 

Therefore, it would have been obvious to one having ordinary skill in the art at the time 
the invention was made that the combination of the prior art and Messer' s identifying click fraud 
can be applied to websites, emails, SPAM emails. One would have been motivated to do this in 
order to better identify click fraud. 

Also, Examiner further notes that it is the Applicant's claims as stated in the Applicant's 
claims that are being rejected with the prior art. Also, although the claims are interpreted in 
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light of the specification, limitations from the specification are not read into the claims. See In 
re Van Geuns, 988 F.2d 1 181, 26 USPQ2d 1057 (Fed. Cir. 1993). And, Examiner notes that 
claims are given their broadest reasonable construction. See In re Hyatt, 21 1 F.3d 1367, 54 
USPQ2d 1664 (Fed. Cir. 2000). 



Conclusion 

The following prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure: 

a) Johnson (5,813,009) discloses storing invalid requests for information in a database 
(Fig. lb; Fig. 3; Fig. 7; Fig. 6; and below): 

"(124) If the request for information is rejected during the card/terminal 
operation, the access card holder will receive a "Not Authorized" message, and 
the invalid access attempt will be updated on the access card database . If a 
sufficient number of invalid access attempts are made using any single card, 
the card will also be invalidated for access until a revalidation routine is 
performed on the card by an authorized agency. 

(1 34) Information requests not within the card bearer's authority will 
receive a "not authorized" message and the invalid access attempt will be 
updated (block 39) to card database 38"; 

b) Callaghan (5,737,523) discloses storing invalid requests for information in a database: 

"(25) In some implementations, the NFS server 200 may respond to in authentic 
NFS clients with more severe security measures. By way of example, the NFS 
server 200 may record in a file and/or on a system terminal that an 
unauthenticated NFS request 22 was received from NFS client 12. Depending upon 
the circumstances, the NFS server 200 may determine that the NFS client 12 is 
attacking and preclude the NFS client 12 from making further NFS requests. One 
embodiment of step 436 will be described below in more detail with reference to 
FIG. 10. 

(28) Once the export information table 222 has been searched in step 454, a 
step 456 determines whether the given file system 30 was found in the export 
information table 222. The given file system 30 is only present in the export 
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information table 222 when the NFS server 200 is making the given file system 
30 accessible for sharing. When the given file system 30 is not found in 
search step 454, control is passed to a step 458 which returns an error message 
to the NFS client 12. In some embodiments of the present invention, additional 
or different security measures may be performed. As described above with 
reference to FIG. 9, these include logging a message on the system terminal, 
maintaining a file record of unauthenticated client requests, and/or precluding 
operation of future NFS requests by the NFS client 12"; 

c) Pines (2005/0143064) discloses storing invalid requests for information in a database: 

"[0119] As illustrated in FIG. 5D, those requested changes which cannot be 
implemented are stored in Rejected Updated Listings Tables 52D along with a 
reason for the rejection, for example, that the user is an invalid user, and/or 
that the requested changes is a duplicate, and the like"; 

d) Wagener (5,793,028) discloses storing invalid requests for information in a database. 



Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 . 1 36(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Arthur Duran whose telephone number is (571) 272-6718. The 
examiner can normally be reached on Mon- Fri 5 8:00-4:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Eric Stamber can be reached on (571) 272-6724. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Arthur Duran 
Primary Examiner 
Art Unit 3622 

Arthur Duran 
Primary Examiner 
5/7/2007 



